Machina Labs

Compliance

• Build and Scale the Compliance Program: Design and implement a scalable compliance program aligned with business growth.
• Establish policies, procedures, documentation standards, and internal controls.
• Serve as a trusted advisor to leadership and functional teams.
• Embed compliance into day-to-day operations across engineering, manufacturing, and programs.
• Export and Trade Compliance: Own and manage ITAR, EAR, and OFAC compliance programs.
• Lead export classification of company technologies and technical data (e.g., ITAR USML, EAR ECCN), documenting jurisdiction and classification determinations to ensure compliant handling, licensing, and contractual alignment.
• Own and manage all federal and state business registrations and trade compliance certifications (e.g., SAM.gov, ITAR/DDTC, CAGE, UEI), ensuring timely renewals and accurate filings.
• Draft and manage export licenses, Technical Assistance Agreements, and related filings.
• Conduct export due diligence and restricted party screenings.
• Maintain written policies and procedures governing trade and national security compliance.
• Advise teams on compliant structuring of domestic and international activities.
• Contractual Flow Downs and Regulatory Requirements: Own compliance regulatory flow downs (in particular, those set forth in the Federal Acquisition Regulation (FAR), Defense Federal Acquisition Regulation Supplement (DFARS)) across the organization.
• Review contracts and subcontracts to ensure accurate incorporation and applicability of required flow-down clauses and negotiate removal or modification of non-applicable terms.
• Translate customer, regulatory, and contractual obligations into clear internal requirements.
• Partner cross-functionally to ensure compliance to relevant flow downs.
• Track and verify compliance obligations throughout the lifecycle of contracts and programs.
• Cybersecurity Compliance and CUI Governance: Support compliance efforts related to NIST 800 171, CMMC 2.0, and DFARS cybersecurity clauses.
• Coordinate documentation, evidence collection, and assessment readiness.
• Partner with IT and Engineering to align cybersecurity practices with contractual requirements.
• Analyze and clarify CUI applicability and markings, and support proper implementation of CUI handling and distribution statement requirements in accordance with contractual and regulatory obligations.
• Quality Systems and Audit Support: Collaborate with Quality to support AS9100 and ISO 9001 environments.
• Assist with internal and external audits, certifications, and regulatory reviews.
• Support site security processes including visitor management and physical security controls.
• Strategic Advisory and Risk Management: Advise leadership on compliance implications related to new programs, foreign partnerships, and strategic initiatives.
• Identify regulatory risks and develop mitigation strategies.
• Support organizational design decisions that balance compliance with operational agility.
• Training and Enablement: Develop and deliver targeted compliance training across functional teams.
• Maintain compliance documentation and reporting processes.
• Support operational and administrative compliance activities as the program matures.

Senior Compliance Manager